CVE-2024-23486

Buffalo BUFFALO wireless LAN routers are affected by CVE-2024-23486 due to plaintext storage of passwords, enabling a network-adjacent, unauthenticated attacker with access to the login page to obtain configured credentials. The issue is documented for multiple WSR-series models (e.g., WSR-... va...

Multiple vulnerabilities in BUFFALO wireless LAN routers

Overview Multiple wireless LAN routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Plaintext storage of a password CWE-256 OS Command Injection CWE-78 Satoru Nagaoka of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the...

PT-2024-19894 · Buffalo · Buffalo Wireless Lan Routers

Name of the Vulnerable Software and Affected Versions: BUFFALO wireless LAN routers affected versions not specified Description: A plaintext storage of a password issue exists, which may allow a network-adjacent unauthenticated attacker with access to the product's login page to obtain configured...

JVN#58236836: Multiple vulnerabilities in BUFFALO wireless LAN routers

Multiple wireless LAN routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Plaintext storage of a password CWE-256 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Base Score 6.5 CVE-2024-23486 OS Command Injection CWE-78 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base...

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved ACX versions 23.1R1-EVO through 23.2R2-EVO, which arises from a plaintext storage vulnerability in a disk file that could allow a local,...

CVE-2024-30727

CVE-2024-30727 is rejected/not used; does not represent an active vulnerability entry.

CVE-2024-30710

CVE-2024-30710 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-29445

This CVE entry is rejected and not used; it does not represent an active vulnerability entry.

CVE-2024-30697

CVE-2024-30697 entry is rejected/not used and does not represent an active vulnerability.

PT-2024-23576 · Unknown · Ros2 Galactic Geochelone

Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions 2 Description: An issue was discovered where the system transmits messages in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. Recommendations: For ROS2 Galactic...

CVE-2024-30678

CVE-2024-30678 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-52341

Technical details (affected products, versions, root cause, impact, and mitigation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

PT-2024-23560 · Unknown · Ros2 Iron Irwini

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: An issue has been discovered where the system transmits messages in plaintext, exposing sensitive information and making it vulnerable to man-in-the-middle MitM attacks. This allows attackers to...

CVE-2024-30662

CVE-2024-30662 is rejected/not used and does not represent an active vulnerability entry.

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible missing privilege check in the plaintext COUNTER CHECK message that is accepted before AS security is activated...

PT-2024-23550 · Unknown · Ros Melodic Morenia

Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia versions 1 Description: An issue was discovered where the system transmits messages in plaintext, exposing sensitive information and making it vulnerable to man-in-the-middle MitM attacks. This allow...